USN-2211-1: libXfont vulnerabilities

Ubuntu Security Notice USN-2211-1

libxfont vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

Ubuntu 14.04 LTS

Ubuntu 13.10

Ubuntu 12.10

Ubuntu 12.04 LTS

Ubuntu 10.04 LTS

Summary

Several security issues were fixed in libXfont.

Software description

libxfont
- X11 font rasterisation library

Details

Ilja van Sprundel discovered that libXfont incorrectly handled fontmetadata file parsing. A local attacker could use this issue to causelibXfont to crash, or possibly execute arbitrary code in order to gainprivileges. (CVE-2014-0209)